WASHINGTON — One day after national security officials said Chinese hackers had conducted a wide-ranging espionage campaign through several U.S. telecommunications companies, the Federal Communications Commission said it will take actions requiring communications service providers to secure their networks.
“The cybersecurity of our nation’s communications critical infrastructure is essential to promoting national security, public safety and economic security,” FCC Chairwoman Jessica Rosenworcel said in a statement Thursday. “As technology continues to advance, so do the capabilities of adversaries, which means the U.S. must adapt and reinforce our defenses.”
She said U.S. intelligence agencies are investigating the so-called Salt Typhoon attack conducted by hackers linked with the Chinese government, which targeted both presidential campaigns earlier this year. Verizon Communications, AT&T and Lumen Technologies were among the eight companies whose systems were breached.
Telecom companies are already required to secure their networks from unlawful access or communications interceptions. Under the FCC’s new proposal, the companies would need to submit an annual certification to affirm they have created, updated and implemented a cybersecurity risk management plan to bolster their protections from future attacks.